Modify ↓
Opened 15 years ago
Last modified 5 years ago
#6775 new defect
UserManagerPlugin can auto import bad (empty) usernames
Reported by: | lkraav | Owned by: | |
---|---|---|---|
Priority: | normal | Component: | UserManagerPlugin |
Severity: | normal | Keywords: | |
Cc: | Trac Release: | 0.11 |
Description
i ran into a case where i had an empty line inside htpasswd file. this resulted in a user being listed in admin panel with all fields seemingly empty. actually the username consists of a single linefeed, which is visible in page source.
now, pressing Import All for UserManagerPlugin imports this empty user and it is very difficult to get rid of it. because none of Remove or Delete buttons are unable to remove this user, direct access to database is needed to fix it.
sqlite> delete from session where last_visit='1267208488'; sqlite> delete from session_attribute where length(sid) < 3;
UserManagerPlugin should probably check for username sanity before importing.
Attachments (0)
Change History (2)
comment:1 Changed 11 years ago by
Owner: | changed from Catalin BALAN to Ryan J Ollos |
---|---|
Status: | new → assigned |
comment:2 Changed 5 years ago by
Owner: | Ryan J Ollos deleted |
---|---|
Status: | assigned → new |
Note: See
TracTickets for help on using
tickets.